SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States

Ethical hacking Stories

American Stories

Ethical hacking stories

NCC Group says human testers still vital in AI security
Data Protection

NCC Group says human testers still vital in AI security

AI tools are speeding routine checks, but hidden business logic flaws and context-specific risks still need human testers to spot them.

By Sean Mitchell • 5 min read • Tue, 28th Jul 2026

Global Stories

Ethical hacking stories

Women leaders urge more female cyber talent as AI grows
Data governance

Women leaders urge more female cyber talent as AI grows

With women still only 17% of cyber workers in the UK and Australia, executives warn AI could deepen security blind spots unless talent widens.

By Sofiah Nichole Salivio • 7 min read • This month
Women urged to close cyber skills gap as AI reshapes work
Security Operations Centres

Women urged to close cyber skills gap as AI reshapes work

With women at just 17% of Australia's cyber workforce, leaders warn AI could widen shortages unless firms widen recruitment.

By Sofiah Nichole Salivio • 5 min read • This month
Liverton Security wins CREST ANZ member company status
Data Protection

Liverton Security wins CREST ANZ member company status

Customers in Australia and New Zealand may now see Liverton Security as a lower-risk supplier after the Wellington firm won CREST ANZ membership.

By Sean Mitchell • 4 min read • Last month
Anthropic says Claude models accessed real systems in tests
Network Security

Anthropic says Claude models accessed real systems in tests

Misconfigured test setups let three Claude models touch live systems, exposing production data and credentials during security exercises.

By Mark Tarre • 4 min read • Last month
ASC-IT launches Darkmoon to hide target data from AI
Data Protection

ASC-IT launches Darkmoon to hide target data from AI

Security teams can now use AI for penetration testing without exposing hostnames, IP ranges or credentials to model providers.

By Joseph Gabriel Lagonsin • 4 min read • Mon, 27th Jul 2026
Tracebit says context bombs can derail AI cyber attacks
Cloud Security

Tracebit says context bombs can derail AI cyber attacks

Tests on five models found a planted text string sharply reduced successful AI-led intrusions, cutting full compromise to 1% in an AWS range.

By Joseph Gabriel Lagonsin • 4 min read • Wed, 15th Jul 2026
XBOW wins AWS application security competency status
DevOps

XBOW wins AWS application security competency status

The AWS badge could help XBOW win more enterprise deals as buyers seek continuous testing that shows which vulnerabilities are exploitable.

By Sofiah Nichole Salivio • 3 min read • Thu, 9th Jul 2026
Your annual penetration testing is already out of date
Data Protection

Your annual penetration testing is already out of date

Organisations risk missed exposures as cloud, APIs and AI systems change far faster than annual security checks can keep up.

By Richard Ford • 5 min read • Thu, 25th Jun 2026
Patchstack & GoDaddy add WordPress vulnerability detection
Security Operations Centres

Patchstack & GoDaddy add WordPress vulnerability detection

Eligible Managed WordPress customers gain visibility into flaws as they are disclosed, as WordPress attacks are being exploited within hours.

By Sean Mitchell • 4 min read • Thu, 18th Jun 2026
Organisations shift to continuous testing in security
Digital Transformation

Organisations shift to continuous testing in security

With AI speeding up attacks, 53% of security leaders say point-in-time tests are already outdated by the time reports land.

By Sean Mitchell • 4 min read • Wed, 17th Jun 2026
Automotive cyber vulnerabilities surge 105%, PCA says
Cloud Security

Automotive cyber vulnerabilities surge 105%, PCA says

Connected cars face a widening attack surface as PCA flags 265 new flaws in the first quarter, with most exploitable without specialist tools.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 12th Jun 2026

Stories from Other Regions

Ethical hacking stories

Why penetration testing must move at the speed of attackers
Data Protection

Why penetration testing must move at the speed of attackers

Stolen credentials can become an operational foothold within hours, leaving annual assessments too slow to catch the real attack paths.

By Patrick Dannacher • 6 min read • Last month
PortSwigger launches Burp AT public beta for pentesters
Application Security

PortSwigger launches Burp AT public beta for pentesters

The beta gives pentesters controlled AI assistance inside Burp Suite, with approvals, logging and scope rules still enforced by the platform.

By Sean Mitchell • 4 min read • Thu, 30th Jul 2026
Intruder launches AI web app pentesting at lower cost
Cloud Security

Intruder launches AI web app pentesting at lower cost

Security teams could cut testing delays to hours as Intruder's AI tool scans web apps for flaws from source code access.

By Sean Mitchell • 4 min read • Fri, 17th Jul 2026
Agoda launches public bug bounty with USD $6,000 reward
Data Protection

Agoda launches public bug bounty with USD $6,000 reward

Researchers can now earn up to USD $6,000 for exposing flaws in Agoda's core web services, APIs and mobile app via HackerOne.

By Sean Mitchell • 4 min read • Thu, 25th Jun 2026
Ethiack says vulnerabilities jumped 106% in a year
Digital Transformation

Ethiack says vulnerabilities jumped 106% in a year

Exploited software flaws are now overtaking stolen passwords as the main breach route, sharpening pressure on security teams to patch faster.

By Sean Mitchell • 3 min read • Sat, 20th Jun 2026